# register.perle.life — SUSPICIOUS

> PhishDestroy flags register.perle.life as a crypto drainer site—redirects wallet assets. Resolves to 188.114.97.3. Verify before clicking.

## Summary
PhishDestroy identifies register.perle.life as an active generic phishing domain under investigation for deploying a crypto drainer, a malicious tool designed to siphon cryptocurrency assets from unwitting victims. The threat involves fraudulent web interfaces that mimic legitimate registration or login portals to trick users into connecting their digital wallets or entering sensitive credentials. Once a user interacts with the domain—often through phishing emails, social media links, or spoofed websites—the crypto drainer silently executes unauthorized transactions, draining tokens or NFTs from connected wallets. This domain is particularly dangerous due to its immediacy; threat actors frequently update or re-deploy such infrastructure to evade detection, making real-time monitoring essential.  This domain was flagged by PhishDestroy after resolving to IP 188.114.97.3, which hosts multiple low-reputation services commonly associated with malicious campaigns. The SSL certificate issued by Let’s Encrypt provides a deceptive veneer of legitimacy, further lowering user suspicion. As of the latest scan, VirusTotal reports 0 out of 95 antivirus engines detecting the domain, indicating it remains largely undetected by automated scanning tools. The domain is recently registered and lacks a verifiable trust score or inclusion on major blocklists such as Google Safe Browsing, OpenPhish, or PhishTank. This combination of low detection, fresh registration, and association with high-risk infrastructure elevates the risk of exposure for cryptocurrency users engaging with this site.  Users are strongly advised to avoid interacting with register.perle.life or any links originating from unsolicited communications. Before entering credentials or connecting a wallet, verify the domain’s legitimacy through PhishDestroy or similar threat intelligence platforms. If exposure occurs, immediately disconnect the wallet from the site, revoke any suspicious permissions via the blockchain explorer, and monitor for unauthorized transactions. Organizations should consider blocking IP 188.114.97.3 at the network perimeter and updating endpoint protection rules to flag traffic to this domain. Cryptocurrency holders are urged to use hardware wallets, enable transaction approvals, and avoid clicking on shortened or unsolicited links to prevent wallet draining.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/297b5f15-de49-4adb-9b08-3b9a5fbaa73e
- PhishDestroy: https://phishdestroy.io/domain/register.perle.life/
- LLM endpoint: https://phishdestroy.io/domain/register.perle.life/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/register.perle.life/
Last updated: 2026-03-23